Showing questions tagged:

Firefox Sandbox implications of User Namespaces being disabled

One of the typical configuration in linux is to turn off the user namespaces and/or network namespaces. This is because most of the exploits in linux have been related to… (read more)

One of the typical configuration in linux is to turn off the user namespaces and/or network namespaces. This is because most of the exploits in linux have been related to namespaces vulnerabilities.

If there is a Firefox ver 127.0.2, running on Linux in which the user namespace is turned off then the following is observed in the Troubleshooting information, i.e. about:support Seccomp-BPF (System Call Filtering) true Seccomp Thread Synchronisation true User Namespaces for privileged processes true User Namespaces false Content Process Sandboxing true Media Plugin Sandboxing true

So how come with the username turned off, the content process and media plugin is still sandboxed? Also is having user namespace turned off, as given above, a security risk?

However if the network namespace is turned off, i.e. max_net_namespaces is set to zero, then it renders the browser unusable. Nothing works. Why is that?

Is there some documentation somewhere where these namespaces and their impact is explained in detail?

Archived 2 310

Youtube comments are gone

I don't know what happened, I haven't been tinkering with anything. This happens for every video, not just this one. I've also posted my addons as well, in case that help… (read more)

I don't know what happened, I haven't been tinkering with anything. This happens for every video, not just this one. I've also posted my addons as well, in case that helps with anything.

Solved Archived 2 643

Add-In Permissions

One of the add-in permissions is "Access your data for sites in the “named” domain". I looked at that and thought, "That certainly cannot include passwords"; BUT the exp… (read more)

One of the add-in permissions is "Access your data for sites in the “named” domain". I looked at that and thought, "That certainly cannot include passwords"; BUT the explanation for this permission is: "The extension could read the content of web pages you visit in the specified domain, as well as data you enter into those web pages, such as usernames and passwords. "

I was stunned.

That means that addins that get this permission have access to my banking/medical/etc. usernames & passwords. This is not acceptable. Can a permission be developed that would be: "Access your data for sites in the “named” domain" (except usernames/passwords).

The permission "Access your data for all websites" is significantly worse in that it applies to all sites.

Archived 2 439

Requesting a Way to Sort Bookmarks...

Hello, I am hoping that there is a way in which I can organise (permanently, not just the current display) my bookmarks alphabetically though still separated by folders a… (read more)

Hello,

I am hoping that there is a way in which I can organise (permanently, not just the current display) my bookmarks alphabetically though still separated by folders and bookmarks. In case that isn't clear, the order would be:

  1. 1 all of the folders grouped together in alphabetical order, then
  2. 2 all the bookmarks grouped together in alphabetical order.

Thanks in advance for any assistance you can offer.

Sam

Archived 2 570

Disable hardware acceleration for PDFs only?

I seem to have a problem with Firefox's builtin PDF viewer. Instead of black text on a white or gray background or something else sensible, I get black text floating over… (read more)

I seem to have a problem with Firefox's builtin PDF viewer. Instead of black text on a white or gray background or something else sensible, I get black text floating over my desktop background in the part of the Firefox window that's showing a PDF. PDFs display fine in an external viewer, but that's just passing the buck, isn't it? Is there a way to fix this on Firefox?

I suspect hardware acceleration is the issue, but everything else seems fine, so I don't want to just blanket disable hardware acceleration. How can acceleration for PDFs alone be disabled?

Archived 1 200

downloading pdf's

I can no longer download pdf's (bills, statements,etc) Downloads come in with "name.pdf.part" When I delete ".part" then I can open file. If I don't change name it reve… (read more)

I can no longer download pdf's (bills, statements,etc) Downloads come in with "name.pdf.part" When I delete ".part" then I can open file. If I don't change name it reverts to pdf.part extension. It's a pain renaming every download. Please help me, I don't want to switch to Chrome. Thanks!

Archived 1 180

I have tried to remove a fake virus warning pop up, but the remove all websites & remove website is greyed out

please tell me how to remove the fake virus warning pop ups, I have followed all the directions, but the remove website, & remove all website buttons are greyed out, … (read more)

please tell me how to remove the fake virus warning pop ups, I have followed all the directions, but the remove website, & remove all website buttons are greyed out, how do I continue now with the removal of the pop ups?

Archived 1 400

Bookmarks are gone with the new update.

What the fuck did you do!!! your last update wiped out all my bookmarks for all my work and everything. who thought that was a GREAT IDEA should be fired!!!! What the fuc… (read more)

What the fuck did you do!!! your last update wiped out all my bookmarks for all my work and everything. who thought that was a GREAT IDEA should be fired!!!! What the fuck do I have to do to get them back and thank you for fucking up my life.

Open 1 60